This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft File: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json) Hash identifier: e1aVxQa3YEtADYPOWUUXTgqS9rXJjE1R7DncU9bH6RE= Subject key identifier: 5B:F7:44:5E:AC:3C:86:0B:28:05:98:89:A7:AC:C9:52:B3:F9:22:6F Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4 Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4 Certificate serial: 019B3A905E47029175EFF97135DF7918FB71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft Manifest number: 0D5E Signing time: Sat 20 Dec 2025 07:01:38 +0000 Manifest this update: Sat 20 Dec 2025 07:01:38 +0000 Manifest next update: Sun 21 Dec 2025 07:01:38 +0000 Files and hashes: 1: MKb9wXtbqGWtE_ve_s7Ybrn63Fw.roa (hash: 70yTR5hwY1yOvZbE5DDGYInarTbe9F4DtBLzW3EAThU=) 2: OqtJcNmb1J50tLIWF6D7y01VxA4.roa (hash: 1ov/KhQ3AFXvHLspCojYHQyYdAVdY1WazSh2AhXG8Y8=) 3: RFaEpCIQ7DiA3iF7lwwQ29jefIA.roa (hash: GOJnWj8oflUm6VfGwYR1lKiwH9eNwUJaLP/8I/2Ya6I=) 4: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: oevh+Ld8GKeLAXVU5928lf0xxH8Cpu0V46DwxQoF1P4=) 5: _tDDtYeC4guX6wO-zUHsidoSz_E.roa (hash: 8nbY0JFVrWrDRZsP3hnIFWTN85PCkZ4W8FZDcNxDifM=) 6: knqD2Ha_mIK6TeaUs6rdEtXjm7Y.roa (hash: IG4vqFBPbvWgHsxQujBWqMW5v3cVtaifoxJ+vZ5e8BU=) 7: t9sNc0uQI6gHaHDMTUeW7X8c5pI.roa (hash: I2z+OvE8dHq8WvzVKbss4tbH6KggeV9GWqIKnOXdtk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:5e:47:02:91:75:ef:f9:71:35:df:79:18:fb:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4 Validity Not Before: Dec 20 07:01:38 2025 GMT Not After : Dec 21 07:01:38 2025 GMT Subject: CN=5bf7445eac3c860b28059889a7acc952b3f9226f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8c:48:49:c4:4d:f2:0f:20:49:24:64:c1:37: 4a:45:f7:2f:3e:f5:45:d7:d6:5c:54:b7:94:16:f3: 6d:23:48:3b:c0:24:80:34:2e:30:20:6c:87:21:ce: 82:24:48:05:83:58:2e:36:35:39:40:9b:98:f2:c8: 26:db:56:34:bc:0a:40:b3:b1:82:19:53:57:78:23: 2e:95:a8:ff:ff:a6:0d:04:6c:49:aa:c4:ec:9e:92: c5:d3:50:17:ba:73:b4:22:e9:8f:6a:93:02:c7:93: fc:af:e0:b5:21:6c:c6:76:de:a0:2a:1f:cc:20:5c: ba:44:ba:ab:eb:9f:11:c5:4d:75:04:bb:f4:3e:ed: fb:ed:3f:d7:59:39:5b:4f:fb:01:22:8c:2e:f2:59: 5b:67:01:1f:ce:66:4b:a8:0c:13:e1:1c:02:5c:0e: 6d:72:d9:ab:98:8e:da:17:91:77:bd:3b:c9:a6:38: 85:fa:c9:31:de:e0:0c:a7:28:9d:2a:71:47:54:36: f6:7b:3c:03:9f:6a:b4:eb:ef:be:b2:58:10:ee:fc: fa:f2:ae:ae:e7:a9:38:91:29:de:7c:33:8a:36:67: bc:c6:36:5c:fe:82:2d:33:5d:d4:50:cd:2d:e1:0e: 55:fd:57:d8:12:e3:2b:16:cb:cc:b2:bd:85:bc:ae: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F7:44:5E:AC:3C:86:0B:28:05:98:89:A7:AC:C9:52:B3:F9:22:6F X509v3 Authority Key Identifier: keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:99:1d:2b:9a:e8:2d:f7:d0:a1:74:98:85:de:9c:e5:9d:34: 22:79:9b:8b:d3:10:91:4e:96:70:f1:3f:4e:c0:56:1d:7d:c5: 02:82:92:a7:dd:3f:bb:1c:45:72:de:58:ce:96:30:8c:52:82: 16:ea:f6:f4:ca:28:f4:7a:a3:42:4c:5a:f3:5b:7b:a8:23:f0: 87:be:92:22:40:c8:1e:0a:f0:77:bc:aa:78:14:ed:11:33:f4: 0c:c0:cc:db:4c:02:ee:44:10:f6:2d:1a:3d:b2:b1:c4:6b:39: 17:3a:90:32:86:7f:d7:ee:c0:d6:fb:db:d7:20:c5:96:52:34: c7:c8:98:17:90:cf:1d:49:7f:72:da:7e:bb:17:38:e9:5f:29: 01:20:3f:b6:22:d9:b9:84:43:5b:83:6d:3d:04:12:91:23:c3: cb:a7:09:7d:d7:06:c8:ff:42:6d:1d:cf:a7:c6:2b:c3:02:ea: 88:06:97:03:cf:95:11:fa:d6:38:8d:59:58:e8:c5:b0:a6:52: ef:37:b6:e8:e1:e4:ac:71:f5:46:f2:f4:ef:39:1b:af:ca:2e: ef:59:9d:a6:f1:69:ab:93:94:ca:e9:16:cb:8f:85:fd:50:c4: dd:fd:00:3b:a5:8f:08:a9:a9:ac:35:e9:bb:76:c3:1e:50:58: f0:46:92:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kF5HApF17/lxNd95GPtxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlODE5OWU4MzQ1NTY3ZDg1MTZiNzg4ZmUyZTFkMzk3ZTI3 YzczYTQwHhcNMjUxMjIwMDcwMTM4WhcNMjUxMjIxMDcwMTM4WjAzMTEwLwYDVQQD Eyg1YmY3NDQ1ZWFjM2M4NjBiMjgwNTk4ODlhN2FjYzk1MmIzZjkyMjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoxIScRN8g8gSSRkwTdKRfcvPvVF 19ZcVLeUFvNtI0g7wCSANC4wIGyHIc6CJEgFg1guNjU5QJuY8sgm21Y0vApAs7GC GVNXeCMulaj//6YNBGxJqsTsnpLF01AXunO0IumPapMCx5P8r+C1IWzGdt6gKh/M IFy6RLqr658RxU11BLv0Pu377T/XWTlbT/sBIowu8llbZwEfzmZLqAwT4RwCXA5t ctmrmI7aF5F3vTvJpjiF+skx3uAMpyidKnFHVDb2ezwDn2q06+++slgQ7vz68q6u 56k4kSnefDOKNme8xjZc/oItM13UUM0t4Q5V/VfYEuMrFsvMsr2FvK500QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFv3RF6sPIYLKAWYiaesyVKz+SJvMB8GA1UdIwQY MBaAFP6Bmeg0VWfYUWt4j+Lh05fifHOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQt ODQwY2NiMzRiM2Y1LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQtODQwY2NiMzRiM2Y1 LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5kdK5ro LffQoXSYhd6c5Z00Inmbi9MQkU6WcPE/TsBWHX3FAoKSp90/uxxFct5YzpYwjFKC Fur29Moo9HqjQkxa81t7qCPwh76SIkDIHgrwd7yqeBTtETP0DMDM20wC7kQQ9i0a PbKxxGs5FzqQMoZ/1+7A1vvb1yDFllI0x8iYF5DPHUl/ctp+uxc46V8pASA/tiLZ uYRDW4NtPQQSkSPDy6cJfdcGyP9CbR3Pp8YrwwLqiAaXA8+VEfrWOI1ZWOjFsKZS 7ze26OHkrHH1RvL07zkbr8ou71mdpvFpq5OUyukWy4+F/VDE3f0AO6WPCKmprDXp u3bDHlBY8EaSWw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:15:18 2025 by rpki-client